INFORMATION SECURITY AND RISK MANAGEMENT.

The article focuses on information security and risk management. The perceived composite risk (PCR) is a composite metric that focuses on the aspects of information security risk including expected loss, expected severe loss, and standard deviation of the loss. Moreover, it provides the user powerfu...

Full description

Bibliographic Details

Published in:	Communications of the ACM Vol. 51; no. 4; pp. 64 - 69
Main Authors:	BODIN, LAWRENCE D., GORDON, LAWRENCE A., LOEB, MARTIN P.
Format:	Article
Published:	Association for Computing Machinery Apr2008
Subjects:	Risk management in business Information services security measures Computer security Data protection Security systems Access to information Data security Database security Database management
Online Access:	View this record in EBSCOhost